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System gets reset 



Basic Platform Initialization (CPU, 
Chipset, Memory) 



Other initialization, device 
discovery & resource allocation 



Boot Manager launches the OS loader based on the 
boot policy (User input or Environment Variables) 



> 
> 



OS loader sets the Watchdog timer to X min. 
OS loade r sets the system to boot a different OS the 
next time, fiust tn ca se the current attempt fails). 



> OS loader gets executed (the regular stuff) 




Before terminating, the OS 
loader will 

> disable the watch-doa timer 

> change the system so that 
the next time it boots the 
same OS 




System is frozen till 
the watchdog timer 
expires. 



OS takes control! 



Watchdog Timer 

expires and 
generates system 
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II Each OS loader can choose their own timer duration dependent on how long they need to boot 
SetWatchDogTimer(360, //set the watchdog timer for 6min - 5 * 60 seconds 

OxFFFFF, //OEMs can choose any number other than those between 0xG0Q0-QxFFFF t 0); 



// Set the BootNext variable to the appropriate value. It will be used in the next reboot if the current attempt fails. 
// BootCurrent will have the OS loader that will be used for the current boot. This will set by the boot manager. 
// So get that value in the variable "CurrentlySelectedBootLoader* 
GetVariable { L"&ootCurrent". , Currently SelectedBootLoader); 

//We have to find out what OS loader is next to the currently selected one in the system's BootQrder. 
GetVariable (L"BootOrder" ^SystemBootOrder); 

!l Get the number of elements in SystemBootOrder. BootOrder is an array of UINT16s. 
int LengthOfArray = sizeof (SystemBootOrder) / sizeof (UINT16); 

// Now scan through the list of boot options in Boot Order. (BootOrder is an ordered iist of boot options) 
for (int i = 0; i < LengthOfArray; i++ ) 



{ 



if (i =* LengthOfArray - 1) //Extreme condition when no other boot options are available to try. 
{ Exit(); //Exits to the firmware shell it has exhausted all the possible OS boot options. 

// This behavior can be customized by the OEMs to alert an administrator or do other things. 

} 

// if the given element in the array is the currently selected OS loader stored in BootCurrent then.,, 
if (SystemBootOrder[i] == CurrentiySelectedBootLoader) 

{ // If the current boot attempt fails, we must boot the next OS as specified in the BootOrder 

// So T set the BootNext variable to the appropriate value i.e„ the next element in the BootOrder 

// list 

SetVahable(L"BootNext'\ sizeof(U!NT1 6), SystemBootOrder[i+1 J); 

break; 



// OS loader does Its regular functions - initializations, loading the drivers, OS kernel, etc. 




// Before terminating, the OS loader will do the following: 

// Disable the watchdog timer, otherwise the system might get 
// reset when the timer expires, 

S^tWatchDogTimer (0, //A vaiue of zero disables the watchdog 

); 

//Delete the BootNext variable so that the next time 
//the system does not boot a different OS. 
SetVariable ( L^BootNext", 

0, //Datasize is set to 0 which deletes the variable 

NULL); //pointer to data is NULL! 
//All set for the Operating System to take over, So, the firmware 
//can relinquish its control by calling ExitBootServices 
ExitBootServices ( ); 



Wait for the watchdog timer to expire. 
(OS loader failed to boot the OS and the 
system has frozen. Just watt for the 
watchdog to generate a reset!) 



OS takes control! 



Watchdog timer expires and the system 
gets reset. 



